Every month we review the work funded by Freexian s Debian LTS offering. Please find the report for February below. Debian project funding

• In February Rapha l and the LTS worked on a survey of Debian developers meant to solicit ideas for improvements in the Debian project at large. You can see the results of the initial discussion here in the list of ideas of which there are already over 30.
• The full survey is due to be emailed to Debian Developers shortly.
• In February 2250 was put aside to fund Debian projects.

Debian LTS contributors In February, 12 contributors were paid to work on Debian LTS, their reports are available below. If you re interested in participating in the LTS or ELTS teams, we welcome participation from the Debian community. Simply get in touch with Jeremiah or Rapha l if you are if you are interested in participating.

• Abhijith PA did 10h out of 10h available.
• Anton Gladky did 20h out of 20h available.
• Ben Hutchings did 16h out of 16h available.
• Chris Lamb did 18h out of 18h available.
• Emilio Pozuelo Monfort did 42.75h out of 42.75h available.
• Jeremiah Foster worked 20 hours out of 20 available on LTS administration and 2.9 hours on funded projects.
• Markus Koschany did 30h (out of 40h available), thus carrying over 10h to March.
• Roberto C. S nchez did 12h out of 12h available.
• Sylvain Beucler did 13h (out of 40h available), thus carrying over 27h to March.
• Thorsten Alteholz did 40h out of 40h available.
• Utkarsh Gupta did 15.75h (out of 42.75h available), thus carrying over 27h to March.

Evolution of the situation In February we released 24 DLAs. The security tracker currently lists 61 packages with a known CVE and the dla-needed.txt file has 26 packages needing an update. You can find out more about the Debian LTS project via the following video:

Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 78 months)
  • GitHub (for 68 months)
  • Civil Infrastructure Platform (CIP) (for 46 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 89 months)
  • Linode (for 83 months)
  • Babiel GmbH (for 72 months)
  • Plat Home (for 71 months)
  • University of Oxford (for 28 months)
  • Deveryware (for 15 months)
  • VyOS Inc (for 10 months)
• Silver sponsors:
  • The Positive Internet Company (for 94 months)
  • Domeneshop AS (for 93 months)
  • Nantes M tropole (for 87 months)
  • Univention GmbH (for 79 months)
  • Universit Jean Monnet de St Etienne (for 79 months)
  • Ribbon Communications, Inc. (for 73 months)
  • Exonet B.V. (for 63 months)
  • Leibniz Rechenzentrum (for 57 months)
  • CINECA (for 46 months)
  • Minist re de l Europe et des Affaires trang res (for 40 months)
  • Cloudways Ltd (for 29 months)
  • Dinahosting SL (for 27 months)
  • Platform.sh (for 22 months)
  • Bauer Xcel Media Deutschland KG (for 21 months)
  • Moxa Intelligence Co., Ltd. (for 16 months)
  • sipgate GmbH (for 13 months)
  • OVH US LLC (for 11 months)
  • Tilburg University (for 11 months)
  • GSI Helmholtzzentrum f r Schwerionenforschung GmbH
  • Telecats BV
  • Soliton Systems K.K.
• Bronze sponsors:
  • Evolix (for 94 months)
  • Seznam.cz, a.s. (for 94 months)
  • Linuxhotel GmbH (for 91 months)
  • Intevation GmbH (for 90 months)
  • Daevel SARL (for 89 months)
  • Bitfolk LTD (for 88 months)
  • Megaspace Internet Services GmbH (for 88 months)
  • Greenbone Networks GmbH (for 87 months)
  • NUMLOG (for 87 months)
  • WinGo AG (for 86 months)
  • Ecole Centrale de Nantes LHEEA (for 83 months)
  • Entr ouvert (for 78 months)
  • Adfinis AG (for 75 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 70 months)
  • Tesorion (for 70 months)
  • GNI MEDIA (for 69 months)
  • Bearstech (for 61 months)
  • LiHAS (for 61 months)
  • People Doc (for 57 months)
  • Catalyst IT Ltd (for 56 months)
  • Supagro (for 51 months)
  • Demarcq SAS (for 50 months)
  • Universit Grenoble Alpes (for 36 months)
  • TouchWeb SAS (for 28 months)
  • SPiN AG (for 24 months)
  • CoreFiling (for 20 months)
  • Institut des sciences cognitives Marc Jeannerod (for 15 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 11 months)
  • Tem Innovations GmbH (for 6 months)
  • WordFinder.pro (for 6 months)
  • CNRS DT INSU R sif (for 4 months)

FTP master This month I accepted 484 and rejected 73 packages. The overall number of packages that got accepted was 495. The overall number of rejected packages was 76, which is about 15% of the uploads to NEW. While most of the maintainers do a great job when creating their debian/copyright, others are a bit lax. Unfortunately those people seem to be more enthusiastic when fighting for changes in NEW processing or even removing NEW. One argument in discussions about NEW is that the copyright verification of packages can be done by the community after accepting the packages in the archive.
Last month I did not get any hint that such checks have been done by anybody. As the past already showed several times, this community based checks simply do not exist. So in the end poorly maintained copyright information will rot in the archive and I am not sure that this really corresponds with the Debian Social Contract. Debian LTS This was my ninety-second month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 40h. During that time I did LTS and normal security uploads of:

• [DLA 2928-1] htmldoc security update for three CVEs
• [#1004049] buster-pu: zziplib debdiff was approved and package uploaded
• [#1004050] bullseye-pu: zziplib debdiff was approved and package uploaded
• [#1004055] buster-pu: debdiff was approved and package uploaded
• [#1006493] bullseye-pu: htmldoc/1.9.11-4+deb11u2
• [#1006494] buster-pu: htmldoc/1.9.3-1+deb10u3
• [#1006550] buster-pu: tiff/4.1.0+git191117-2~deb10u4
• [#1006551] bullseye-pu: tiff/4.2.0-1+deb11u1

Unfortunately salsa went down at the end of the month, so several planned uploads did not happen and have to be delayed to March. I also continued to work on security support for golang packages. Further I worked on packages in NEW on security-master and injected missing sources. Last but not least I did some days of frontdesk duties. Debian ELTS This month was the forty-fourth ELTS month. During my allocated time I uploaded:

• ELA-567-1 for apache2
• ELA-567-2 for apache2
• ELA-568-1 for ksh
• ELA-569-1 for tiff
• ELA-570-1 for htmldoc

Further I worked on cyrus-sasl but did not do an upload yet. Last but not least I did some days of frontdesk duties. Debian Printing As announced last month I uploaded a new version of cups. Altogether I uploaded new upstream versions or improved packaging of:

• cups
• cups-filters

Debian Astro This month I uploaded new upstream versions or improved packaging of:

• openvlbi

Other stuff This month I uploaded new upstream versions or improved packaging of:

• duktape
• meep
• bitshuffle
• several golang packages

Every month we review the work funded by Freexian s Debian LTS offering. Please find the report for January below. Debian project funding

• In January we saw a new funded project proposed. The project is meant to bring in a number of changes to the Tryton modules and packages in Debian. Tryton, a full featured, entirely open source business software platform, is supported by its own foundation. You can track the current status of all our funded projects at its dedicated web page.
• Folks continue to add to the Grow Your Ideas project page, that s great.
• In January 2550 was put aside to fund Debian projects.

We continue to looking forward to hearing about Debian project proposals from various Debian stakeholders. This month has seen work on a survey that will go out to Debian Developers to gather feedback on what they think should be the priorities for funding in the project. Learn more about the rationale behind this initiative in this article. Debian LTS contributors In January, 13 contributors were paid to work on Debian LTS, their reports are available below. If you re interested in participating in the LTS or ELTS teams, we welcome participation from the Debian community. Simply get in touch with Jeremiah or Rapha l.

• Abhijith Pa worked 5 hours out of 5 available.
• Anton Gladky worked 12 hours out of 12 available.
• Ben Hutchings worked 16 hours out of 24 available and carried over 8 for February.
• Chris Lamb worked 18 hours out of 18 available.
• Emilio Pozuelo Monfort worked 55 hours out of 58.25 available and carried over 3.25 for February
• Jeremiah Foster worked 20 hours out of 20 available on LTS administration and 8.3 hours on funded projects.
• Lee Garrett didn t spend any hours in January and carries over 39.25 hours to February
• Markus Koschany worked 34 hours out of 40 available and carried over 6 for February.
• Ola Lundqvist reported via email that they didn t spend any hours in January and carries over 11 from December for a total of 12 hours for February.
• Roberto C. Sanchez worked 9 hours out of 32 available and carried over 23 for February
• Sylvain Beucler worked 22 hours out of 40 available and carried over 14 for February
• Thorsten Alteholz worked 40 hours out of 40 available.
• Utkarsh Gupta worked 58.25 hours out of 58.25 available.

Evolution of the situation In January we released 34 DLAs. The security tracker currently lists 39 packages with a known CVE and the dla-needed.txt file has 20 packages still needing an update. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 77 months)
  • GitHub (for 68 months)
  • Civil Infrastructure Platform (CIP) (for 45 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 88 months)
  • Linode (for 82 months)
  • Babiel GmbH (for 71 months)
  • Plat Home (for 71 months)
  • University of Oxford (for 27 months)
  • Deveryware (for 14 months)
  • VyOS Inc (for 9 months)
• Silver sponsors:
  • The Positive Internet Company (for 93 months)
  • Domeneshop AS (for 92 months)
  • Nantes M tropole (for 86 months)
  • Univention GmbH (for 78 months)
  • Universit Jean Monnet de St Etienne (for 78 months)
  • Ribbon Communications, Inc. (for 72 months)
  • Exonet B.V. (for 62 months)
  • Leibniz Rechenzentrum (for 56 months)
  • CINECA (for 45 months)
  • Minist re de l Europe et des Affaires trang res (for 39 months)
  • Cloudways Ltd (for 29 months)
  • Dinahosting SL (for 27 months)
  • Bauer Xcel Media Deutschland KG (for 21 months)
  • Platform.sh (for 21 months)
  • Moxa Intelligence Co., Ltd. (for 15 months)
  • sipgate GmbH (for 12 months)
  • OVH US LLC (for 10 months)
  • Tilburg University (for 10 months)
  • GSI Helmholtzzentrum f r Schwerionenforschung GmbH
  • Telecats BV
• Bronze sponsors:
  • Evolix (for 93 months)
  • Seznam.cz, a.s. (for 93 months)
  • Intevation GmbH (for 90 months)
  • Linuxhotel GmbH (for 90 months)
  • Daevel SARL (for 88 months)
  • Bitfolk LTD (for 87 months)
  • Megaspace Internet Services GmbH (for 87 months)
  • Greenbone Networks GmbH (for 86 months)
  • NUMLOG (for 86 months)
  • WinGo AG (for 86 months)
  • Ecole Centrale de Nantes LHEEA (for 82 months)
  • Entr ouvert (for 77 months)
  • Adfinis AG (for 74 months)
  • GNI MEDIA (for 69 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 69 months)
  • Tesorion (for 69 months)
  • Bearstech (for 60 months)
  • LiHAS (for 60 months)
  • People Doc (for 57 months)
  • Catalyst IT Ltd (for 55 months)
  • Supagro (for 50 months)
  • Demarcq SAS (for 49 months)
  • Universit Grenoble Alpes (for 35 months)
  • TouchWeb SAS (for 27 months)
  • SPiN AG (for 24 months)
  • CoreFiling (for 19 months)
  • Institut des sciences cognitives Marc Jeannerod (for 14 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 11 months)
  • Tem Innovations GmbH (for 6 months)
  • WordFinder.pro (for 5 months)
  • CNRS DT INSU R sif (for 4 months)

FTP master This month I accepted 342 and rejected 57 packages. The overall number of packages that got accepted was 366. Lately I was asked: Is it ftpmaster s opinion and policy that there is no difference in NEW queue review process between bin and src? This is a yes/no-question and in this generality the answer is clearly: Every package in NEW needs a full review. Of course there are circumstances with exceptions. For example after an upload of -1, which would get a full review, the upload of -2 afterwards, introducing a new binary package, would get a much faster review. In this case it would make sense to ping on IRC and draw attention to this. Nevertheless the evaluation of a light review might differ between the maintainer and the person doing the review. Debian LTS This was my ninety-first month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 40h. During that time I did LTS and normal security uploads of:

• [DLA 2882-1] sphinxsearch security update for one CVE
• [DLA 2890-1] libspf2 security update for two CVEs
• [DLA 2897-1] apr security update for one CVE
• [DLA 2900-1] lrzsz security update for one CVE
• [DLA 2901-1] libxfont security update for one CVE
• [DLA 2902-1] graphicsmagick security update for one CVE
• [#1004049] buster-pu: package zziplib/0.13.62-3.2+deb10u1
• [#1004050] bullseye-pu: package zziplib/0.13.62-3.3+deb11u1
• [#1004055] buster-pu: package raptor2/2.0.14-1.1~deb10u2

I also started to work on security support for golang packages. Though this sounds like an easy task, the devel is in the details.
As CVEs need to be fixed in unstable first, at the moment it looks like this is the most time consuming task. I will report later on my journey to fix open CVEs in golang-github-russellhaering-goxmldsig Further I worked on packages in NEW on security-master and injected missing sources. Last but not least I did some days of frontdesk duties and attended an LTS meeting on IRC. Debian ELTS This month was the forty-third ELTS month. During my allocated time I uploaded:

• ELA-544-1 for libspf2
• ELA-549-1 for apr
• ELA-552-1 for lrzsz
• ELA-553-1 for libxfont

Further I worked on an update for apache2 Last but not least I did some days of frontdesk duties. Debian Printing I was finally able to upload a new version of hplip and Ubuntu is now able to build new snaps for their next release.
Altogether I uploaded new upstream versions or improved packaging of:

• pappl
• rasterview
• cjet
• epson-inkjet-printer-escpr
• cups-filters
• lprint
• hplip

Now the dashboard looks rather good and my next task for February is an update of cups. Debian Astro As there was a release of version 1.9.4 of INDI and indi-3rdparty, I also uploaded the new version of all INDI drivers and releated libs from indi-3rdparty. Other stuff This month I uploaded lots of new upstream releases of golang packages.

FTP master This month I accepted 412 and rejected 44 packages. The overall number of packages that got accepted was 423. Debian LTS This was my ninetieth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 40h. During that time I did LTS and normal security uploads of:

• [DLA 2846-1] raptor2 security update for one CVE
• [DLA 2845-1] libsamplerate security update for one CVE
• [DLA 2859-1] zziplib security update for one CVE
• [DLA 2858-1] libzip security update for one CVE
• [DLA 2869-1] xorg-server security update for three CVEs
• [#1002912] for graphicsmagick in Buster
• [debdiff] for sphinxearch/buster to maintainer and sec team
• [debdiff] for zziplib/buster to maintainer
• [debdiff] for zziplib/bullseye to maintainer
• [debdiff] for raptor2/bullseye to maintainer

I also started to work on libarchive Further I worked on packages in NEW on security-master. In order to faster process such packages, I added a notification when work arrived there. Last but not least I did some days of frontdesk duties. Debian ELTS This month was the forty-second ELTS month. During my allocated time I uploaded:

• ELA-527-1 for libsamplerate
• ELA-528-1 for raptor2
• ELA-529-1 for ufraw
• ELA-532-1 for zziplib
• ELA-534-1 for xorg-server

Last but not least I did some days of frontdesk duties. Debian Astro Related to my previous article about fun with telescopes I uploaded new versions or did source uploads for:

• indi-aagcloudwatcher-ng
• indi-aok
• indi-apogee
• indi-armadillo-platypus
• indi-asi
• indi-astrolink4
• indi-astromechfoc
• indi-avalon
• indi-beefocus
• indi-bresserexos2
• indi-dreamfocuser
• indi-dsi
• indi-eqmod
• indi-ffmv
• indi-fishcamp
• indi-fli
• indi-gige
• indi-gphoto
• indi-gpsd
• indi-gpsnmea
• indi-inovaplx
• indi-limesdr
• indi-maxdomeii
• indi-mgen
• indi-nexdome
• indi-nightscape
• indi-orion-ssg3
• indi-pentax
• indi-rtklib
• indi-sbig
• indi-shelyak
• indi-spectracyber
• indi-starbook
• indi-starbook-ten
• indi-sx
• indi-talon6
• indi-webcam
• libapogee3
• libasi
• libfishcamp
• libfli
• libinovasdk
• libpktriggercord
• libricohcamerasdk
• libsbig

Besides the indi-stuff I also uploaded

• openvlbi
• fxload

Other stuff I celebrated christmas :-).

Every month we review the work funded by Freexian s Debian LTS offering. Please find the report for November below. Debian project funding

• Our project funding work continues with an active bid on the work of packaging a recent gradle in Debian. This month the bidder has been estimating the scope of the entire project.
• The Grow Your Ideas project page also has some ambitious initiatives that may evolve into a funded project. The project ideas on that page range from a new wiki for Debian, a more efficient reimbursement process, and the implementation of PPAs for Debian.
• In November 2625 was put aside to fund Debian projects.

We continue to looking forward to hearing about Debian project proposals from various Debian stakeholders. This month has seen work on a survey that will go out to Debian Developers to gather feedback on what they think should be the priorities for funding in the project. Learn more about the rationale behind this initiative in this article. Debian LTS contributors In November 13 contributors were paid to work on Debian LTS, their reports are available below. If you re interested in participating in the LTS or ELTS teams, we welcome participation from the Debian community. Simply get in touch with Jeremiah if you are interested in participating.

• Adrian Bunk did 62h out of 56h assigned for November and 6h from October.
• Anton Gladky did 12h out of 12h assigned.
• Ben Hutchings did 20h (out of 16h available, thus anticipating 4h from December).
• Chris Lamb did 18h out of 18h assigned.
• Holger Levsen gave back 3h (out of 3h assigned).
• Jeremiah Foster is coordinating/managing the LTS team did 29h (out of 10h assigned and 10h from October for LTS administration), and spent 9 hours on Projects funded directly through the project funding program.
• Lee Garrett did 9 hours out 60 assigned and carried over 51h into December
• Markus Koschany did 30h out of 30h assigned.
• Neil Williams did 1.5h (out of 11.5h assigned and 28.5h from October). He gave back the remaining hours.
• Roberto C. S nchez did 31.5h (out of 32h assigned), thus carrying over .5h to December.
• Sylvain Beucler did 21.5h (out of 62h assigned), thus carrying over 40.5h to December.
• Thorsten Alteholz did 40h (out of 40h assigned).
• Utkarsh Gupta did 30 (out of 40h assigned), thus carrying over 10h to December.

Evolution of the situation In November we released 31 DLAs. The security tracker currently lists 23 packages with a known CVE and the dla-needed.txt file has 16 packages needing an update. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 75 months)
  • GitHub (for 65 months)
  • Civil Infrastructure Platform (CIP) (for 43 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 86 months)
  • Linode (for 80 months)
  • Babiel GmbH (for 69 months)
  • Plat Home (for 68 months)
  • University of Oxford (for 25 months)
  • Deveryware (for 12 months)
  • VyOS
• Silver sponsors:
  • The Positive Internet Company (for 91 months)
  • Domeneshop AS (for 90 months)
  • Nantes M tropole (for 84 months)
  • Univention GmbH (for 76 months)
  • Universit Jean Monnet de St Etienne (for 76 months)
  • Ribbon Communications, Inc. (for 70 months)
  • Exonet B.V. (for 59 months)
  • Leibniz Rechenzentrum (for 54 months)
  • CINECA (for 43 months)
  • Minist re de l Europe et des Affaires trang res (for 37 months)
  • Cloudways Ltd (for 26 months)
  • Dinahosting SL (for 24 months)
  • Platform.sh (for 19 months)
  • Bauer Xcel Media Deutschland KG (for 18 months)
  • Moxa Intelligence Co., Ltd. (for 13 months)
  • sipgate GmbH (for 10 months)
  • OVH US LLC (for 8 months)
  • Tilburg University (for 8 months)
• Bronze sponsors:
  • Evolix (for 91 months)
  • Seznam.cz, a.s. (for 91 months)
  • Linuxhotel GmbH (for 88 months)
  • Intevation GmbH (for 87 months)
  • Daevel SARL (for 86 months)
  • Bitfolk LTD (for 85 months)
  • Megaspace Internet Services GmbH (for 85 months)
  • Greenbone Networks GmbH (for 84 months)
  • NUMLOG (for 84 months)
  • WinGo AG (for 83 months)
  • Ecole Centrale de Nantes LHEEA (for 80 months)
  • Entr ouvert (for 75 months)
  • Adfinis AG (for 72 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 67 months)
  • Tesorion (for 67 months)
  • GNI MEDIA (for 66 months)
  • Bearstech (for 58 months)
  • LiHAS (for 58 months)
  • People Doc (for 54 months)
  • Catalyst IT Ltd (for 53 months)
  • Supagro (for 48 months)
  • Demarcq SAS (for 47 months)
  • Universit Grenoble Alpes (for 33 months)
  • TouchWeb SAS (for 25 months)
  • SPiN AG (for 21 months)
  • CoreFiling (for 17 months)
  • Institut des sciences cognitives Marc Jeannerod (for 12 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 8 months)
  • Tem Innovations GmbH (for 3 months)
  • WordFinder.pro (for 3 months)
  • CNRS DT INSU R sif

FTP master This month I accepted 564 and rejected 93 packages. The overall number of packages that got accepted was 591. Debian LTS This was my eighty-ninth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 40h. During that time I did LTS and normal security uploads of:

• [DLA 2820-1] atftp security update for two CVEs
• [DLA 2821-1] axis security update for one CVE
• [DLA 2822-1] netkit-rsh security update for two CVEs
• [DLA 2825-1] libmodbus security update for two CVEs
• [#1000408] for libmodbus in Buster
• [#1000485] for btrbk in Bullseye
• [#1000486] for btrbk in Buster

I also started to work on pgbouncer to get an update for each release and had to process packages from NEW on security-master. Further I worked on a script to automatically publish DLAs on the Debian website, that are posted to debian-lts-announce. The script can be found on salsa. It only publishes stuff from people on a whitelist. At the moment it is running on a computer at home. You might run your own copy, or just send me an email to be put on the whitelist as well. Last but not least I did some days of frontdesk duties. Debian ELTS This month was the forty-first ELTS month. During my allocated time I uploaded:

• ELA-517-1 for atftp
• ELA-519-1 for qtbase-opensource-src
• ELA-520-1 for libsdl1.2
• ELA-521-1 for libmodbus

Last but not least I did some days of frontdesk duties. Debian Printing Unfortunately I did not do as much as I wanted this month. At least I looked at some old bugs and uploaded new upstream versions of

• ippsample

I hope this will improve in December again. New versions of cups and hplip are on my TODO-list. Debian Astro This month I uploaded new versions of

• astap
• astap-cli

Other stuff I improved packaging or fixed bugs of:

• harminv
• dateutils
• feynmf

Every month we review the work funded by Freexian s Debian LTS offering. Please find the report for October below. Debian project funding

• Our project funding work continues with an active bid on the work of packaging gradle in Debian. The next steps are reviewing the bid and formal approval.
• In October 2,475 EUR was put aside to fund Debian projects.

We re looking forward to receiving more projects from various Debian teams! Learn more about the rationale behind this initiative in this article. Debian LTS contributors In October 12 contributors were paid to work on Debian LTS, their reports are available below.

• Adrian Bunk did 40.5h in October (out of 28.5h assigned and 18h remaining, thus keeping 6h for November).
• Anton Gladky did 12h (out of 12h assigned).
• Ben Hutchings did 14.75h in October (out of 2h assigned and 28h remaining, thus keeping 15.25h for November).
• Chris Lamb did 18h (out of 18h assigned).
• Holger Levsen did 1h (out of 12h assigned, but gave back the remaining 11h).
• Jeremiah Foster worked 20h (out of 20h assigned and 10h remaining, thus keeping 10h for November).
• Markus Koschany did 28.5h (out of 28.5h assigned).
• Ola Lundqvist did 5h (out of 5h assigned).
• Roberto C. S nchez did 28.5h (out of 28.5h assigned).
• Sylvain Beucler did 23.5h (out of 28.5h assigned, but gave back the remaining 5h).
• Thorsten Alteholz did 28.5h (out of 28.5h assigned).
• Utkarsh Gupta did 28.5h (out of 28.5h assigned).

Evolution of the situation In October we released 34 DLAs.

Also, we would like to remark once again that we are constantly looking for new contributors. Please contact Jeremiah if you are interested! The security tracker currently lists 37 packages with a known CVE and the dla-needed.txt file has 22 packages needing an update. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 74 months)
  • GitHub (for 64 months)
  • Civil Infrastructure Platform (CIP) (for 42 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 85 months)
  • Linode (for 79 months)
  • Babiel GmbH (for 68 months)
  • Plat Home (for 67 months)
  • University of Oxford (for 24 months)
  • Deveryware (for 11 months)
  • VyOS
• Silver sponsors:
  • The Positive Internet Company (for 90 months)
  • Domeneshop AS (for 89 months)
  • Nantes M tropole (for 83 months)
  • Univention GmbH (for 75 months)
  • Universit Jean Monnet de St Etienne (for 75 months)
  • Ribbon Communications, Inc. (for 69 months)
  • Exonet B.V. (for 59 months)
  • Leibniz Rechenzentrum (for 53 months)
  • CINECA (for 42 months)
  • Minist re de l Europe et des Affaires trang res (for 36 months)
  • Cloudways Ltd (for 25 months)
  • Dinahosting SL (for 23 months)
  • Platform.sh (for 18 months)
  • Bauer Xcel Media Deutschland KG (for 17 months)
  • Moxa Intelligence Co., Ltd. (for 12 months)
  • sipgate GmbH (for 9 months)
  • OVH US LLC (for 7 months)
  • Tilburg University (for 7 months)
• Bronze sponsors:
  • Evolix (for 90 months)
  • Seznam.cz, a.s. (for 90 months)
  • Linuxhotel GmbH (for 87 months)
  • Intevation GmbH (for 86 months)
  • Daevel SARL (for 85 months)
  • Bitfolk LTD (for 84 months)
  • Megaspace Internet Services GmbH (for 84 months)
  • Greenbone Networks GmbH (for 83 months)
  • NUMLOG (for 83 months)
  • WinGo AG (for 82 months)
  • Ecole Centrale de Nantes LHEEA (for 79 months)
  • Entr ouvert (for 74 months)
  • Adfinis AG (for 71 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 66 months)
  • Tesorion (for 66 months)
  • GNI MEDIA (for 65 months)
  • Bearstech (for 57 months)
  • LiHAS (for 57 months)
  • People Doc (for 53 months)
  • Catalyst IT Ltd (for 52 months)
  • Supagro (for 47 months)
  • Demarcq SAS (for 46 months)
  • Universit Grenoble Alpes (for 32 months)
  • TouchWeb SAS (for 24 months)
  • SPiN AG (for 20 months)
  • CoreFiling (for 16 months)
  • Institut des sciences cognitives Marc Jeannerod (for 11 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 7 months)
  • Tem Innovations GmbH
  • WordFinder.pro
  • CNRS DT INSU R sif

FTP master This month I accepted 341 and rejected 46 packages. The rejection is as high as last month. I hope everybody is aware that pressing just one key when accepting a package is much faster than writing an explanation why a package has to be rejected. Anyway, the overall number of packages that got accepted was 355. Debian LTS This was my eighty-eighth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 28.5h. During that time I did LTS and normal security uploads of:

• [DLA 2788-1] strongswan security update for one CVE
• [DLA 2789-1] squashfs-tools security update for one CVE
• [DLA 2792-1] faad2 security update for seven CVEs
• [DLA 2796-1] jbig2dec security update for two CVEs
• [DLA 2800-1] cups security update for one CVE
• [#998042] for jbig2dec in Buster

I also continued to work on exiv2. Last but not least I did some days of frontdesk duties. Debian ELTS This month was the fortieth ELTS month. During my allocated time I uploaded:

• ELA-494-1 for curl
• ELA-497-1 for squashfs-tools
• ELA-498-1 for openssl
• ELA-501-1 for faad2
• ELA-504-1 for jbig2dec
• ELA-508-1 for cups

Last but not least I did some days of frontdesk duties. Debian Printing I improved packaging or fixed bugs or uploaded a new version of:

• c2050
• fxlinuxprint
• c2esp
• lprint
• usb-modeswitch
• cups-bjnp
• dymo-cups-drivers
• pnm2ppa
• sane-airscan
• ippsample

Last but not least I looked at some old bugs and checked whether they could be closed. Debian Astro Though being a silent member of Debian Astro for a long time, I am now going to be more active now. Most of the time I will be focused on packages for telescope control, but of course I won t stay away from other topics. So I uploaded:

• libapogee3
• libasi
• planetary-system-stacker
• astap
• astap-cli

If you know of other missing packages, don t hesitate to tell me! Other stuff On my neverending golang challenge I again uploaded some packages either for NEW or as source upload. I uploaded new upstream versions of:

• sshesame
• c2go

I improved packaging or fixed bugs of:

• npd6
• arpalert
• entropybroker

Like each month, have a look at the work funded by Freexian s Debian LTS offering. Debian project funding Folks from the LTS team, along with members of the Debian Android Tools team and Phil Morrel, have proposed work on the Java build tool, gradle, which is currently blocked due to the need to build with a plugin not available in Debian. The LTS team reviewed the project submission and it has been approved. After approval we ve created a Request for Bids which is active now. You ll hear more about this through official Debian channels, but in the meantime, if you feel you can help with this project, please submit a bid. Thanks! This September, Freexian set aside 2550 EUR to fund Debian projects. We re looking forward to receive more projects from various Debian teams! Learn more about the rationale behind this initiative in this article. Debian LTS contributors In September, 15 contributors have been paid to work on Debian LTS, their reports are available:

• Abhijith PA has returned hours and marked themselves inactive, at least for the time being. He did 0h out of 14h, carried over 14h and returned 28h.
• Adrian Bunk did 19.5h (out of 24.75h assigned and 12.75 from August), carrying over 18h to October.
• Anton Gladky did 12h (out of 12h assigned).
• Ben Hutchings did 2h (out of 12.75h assigned and 19.25h from August), thus carrying over 30h to October.
• Chris Lamb did 18h (out of 18h assigned).
• Emilio Pozuelo Monfort did not report back about their work so we assume they did nothing (out of 5.5h assigned plus 74.5h from August), thus is carrying over 80h for October.
• Holger Levsen did 3h (out of 12h assigned) and gave back 9h and carried over 3h.
• Jeremiah Foster worked 10 hours (out of 20h assigned) on LTS work, carrying over 10h.
• Lee Garrett did not report back about their work so we assume they did nothing (out of 24.75h assigned and 23.75 from August), thus is carrying over 48.50h for October.
• Markus Koschany did 43.5h (out of 24.75h assigned and 18.75h from August)
• Neil Williams did 24.5h (out of 24.75h assigned)
• Roberto C. S nchez did 6h (out of 24.75h assigned and gave back 18.75h)
• Sylvain Beucler did 27h (out of 24.75h assigned).
• Thorsten Alteholz did 24.75h (out of 24.75h assigned).
• Utkarsh Gupta did 24.75h (out of 24.75h assigned) but did not publish his report yet.
• Ola Lundqvist did 2 hours (out of 21h carried over from previous months), and is thus carrying 19h for October.

Evolution of the situation In September we released 30 DLAs. September was also the second month of Jeremiah coordinating LTS contributors. Also, we would like say that we are always looking for new contributors to LTS. Please contact Jeremiah if you are interested! The security tracker currently lists 33 packages with a known CVE and the dla-needed.txt file has 26 packages needing an update. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 73 months)
  • GitHub (for 64 months)
  • Civil Infrastructure Platform (CIP) (for 41 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 84 months)
  • Linode (for 78 months)
  • Babiel GmbH (for 67 months)
  • Plat Home (for 67 months)
  • University of Oxford (for 23 months)
  • Deveryware (for 10 months)
  • VyOS
• Silver sponsors:
  • The Positive Internet Company (for 89 months)
  • Domeneshop AS (for 88 months)
  • Nantes M tropole (for 82 months)
  • Univention GmbH (for 74 months)
  • Universit Jean Monnet de St Etienne (for 74 months)
  • Ribbon Communications, Inc. (for 68 months)
  • Exonet B.V. (for 58 months)
  • Leibniz Rechenzentrum (for 52 months)
  • CINECA (for 41 months)
  • Minist re de l Europe et des Affaires trang res (for 35 months)
  • Cloudways Ltd (for 24 months)
  • Dinahosting SL (for 22 months)
  • Bauer Xcel Media Deutschland KG (for 17 months)
  • Platform.sh (for 17 months)
  • Moxa Intelligence Co., Ltd. (for 11 months)
  • sipgate GmbH (for 8 months)
  • OVH US LLC (for 6 months)
  • Tilburg University (for 6 months)
• Bronze sponsors:
  • Evolix (for 89 months)
  • Seznam.cz, a.s. (for 89 months)
  • Linuxhotel GmbH (for 86 months)
  • Intevation GmbH (for 85 months)
  • Daevel SARL (for 84 months)
  • Bitfolk LTD (for 83 months)
  • Megaspace Internet Services GmbH (for 83 months)
  • Greenbone Networks GmbH (for 82 months)
  • NUMLOG (for 82 months)
  • WinGo AG (for 81 months)
  • Ecole Centrale de Nantes LHEEA (for 78 months)
  • Entr ouvert (for 73 months)
  • Adfinis AG (for 70 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 65 months)
  • Tesorion (for 65 months)
  • GNI MEDIA (for 64 months)
  • Bearstech (for 56 months)
  • LiHAS (for 56 months)
  • People Doc (for 52 months)
  • Catalyst IT Ltd (for 51 months)
  • Demarcq SAS (for 45 months)
  • Universit Grenoble Alpes (for 31 months)
  • TouchWeb SAS (for 23 months)
  • SPiN AG (for 19 months)
  • CoreFiling (for 15 months)
  • Institut des sciences cognitives Marc Jeannerod (for 10 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 7 months)
  • Tem Innovations GmbH
  • WordFinder.pro

FTP master This month I accepted 224 and rejected 47 packages. This is almost thrice the rejects of last month. Please, be more careful and check your package twice before uploading. The overall number of packages that got accepted was 233. Debian LTS This was my eighty-seventh month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 24.75h. During that time I did LTS and normal security uploads of:

• [DLA 2755-1] btrbk security update for one CVE
• [DLA 2762-1] grilo security update for one CVE
• [DLA 2766-1] openssl security update for one CVE
• [DLA 2774-1] openssl1.0 security update for one CVE
• [DLA 2773-1] curl security update for two CVEs

I also started to work on exiv2 and faad2. Last but not least I did some days of frontdesk duties. Debian ELTS This month was the thirty-ninth ELTS month. Unfortunately during my allocated time I could not process any upload. I worked on openssl, curl and squashfs-tools but for one reason or another the prepared packages didn t pass all tests. In order to avoid regressions, I postponed the uploads (meanwhile an ELA for curl was published ). Last but not least I did some days of frontdesk duties. Other stuff On my neverending golang challenge I again uploaded some packages either for NEW or as source upload. As Odyx took a break from all Debian activities, I volunteered to take care of the printing packages. Please be merciful when somethings breaks after I did an upload. My first printing upload was hplip

Like each month, have a look at the work funded by Freexian s Debian LTS offering. Debian project funding In August, we put aside 2460 EUR to fund Debian projects. We received a new project proposal that got approved and there s an associated bid request if you feel like proposing yourself to implement this project. We re looking forward to receive more projects from various Debian teams! Learn more about the rationale behind this initiative in this article. Debian LTS contributors In August, 14 contributors have been paid to work on Debian LTS, their reports are available:

• Abhijith PA did 4.0h (out of 14h assigned and 5h from August), thus carrying over 15h to September.
• Adrian Bunk did 11h (out of 23.75h assigned), thus carrying over 12.75h to September.
• Anton Gladky did 12h (out of 12h assigned).
• Ben Hutchings did 1.25h (out of 13.25h assigned and 6h from August), thus carrying over 18h to September.
• Chris Lamb did 18h (out of 18h assigned).
• Emilio Pozuelo Monfort did not report back about their work so we assume they did nothing (out of 23.75h assigned plus 50.75h from August), thus is carrying over 74.5h for September.
• Holger Levsen did 3h (out of 12h assigned) to help coordinate the team, and gave back the remaining hours.
• Lee Garrett did nothing (out of 23.75h assigned), thus is carrying over 23.75h for September.
• Markus Koschany did 35h (out of 23.75h assigned and 30h from August), thus carrying over 18.75h to September.
• Neil Williams did 24h (out of 23.75h assigned), thus anticipating 0.25h of October.
• Roberto C. S nchez did 22.25h (out of 23.75h assigned), thus carrying over 1.5h to September.
• Sylvain Beucler did 21.5h (out of 23.75h assigned), thus carrying over 2.25h to September.
• Thorsten Alteholz did 23.75h (out of 23.75h assigned).
• Utkarsh Gupta did 23.75h (out of 23.75h assigned).

Evolution of the situation In August we released 30 DLAs.

This is the first month of Jeremiah coordinating LTS contributors. We would like to thank Holger Levsen for his work on this role up to now.

Also, we would like to remark once again that we are constantly looking for new contributors. Please contact Jeremiah if you are interested! The security tracker currently lists 73 packages with a known CVE and the dla-needed.txt file has 29 packages needing an update. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 72 months)
  • GitHub (for 63 months)
  • Civil Infrastructure Platform (CIP) (for 40 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 83 months)
  • Linode (for 77 months)
  • Babiel GmbH (for 67 months)
  • Plat Home (for 66 months)
  • University of Oxford (for 22 months)
  • Deveryware (for 9 months)
  • VyOS
• Silver sponsors:
  • The Positive Internet Company (for 89 months)
  • Domeneshop AS (for 88 months)
  • Nantes M tropole (for 82 months)
  • Universit Jean Monnet de St Etienne (for 74 months)
  • Univention GmbH (for 73 months)
  • Ribbon Communications, Inc. (for 67 months)
  • Exonet B.V. (for 57 months)
  • Leibniz Rechenzentrum (for 51 months)
  • CINECA (for 41 months)
  • Minist re de l Europe et des Affaires trang res (for 35 months)
  • Cloudways Ltd (for 24 months)
  • Dinahosting SL (for 22 months)
  • Bauer Xcel Media Deutschland KG (for 16 months)
  • Platform.sh (for 16 months)
  • Moxa Intelligence Co., Ltd. (for 10 months)
  • sipgate GmbH (for 7 months)
  • Tilburg University (for 6 months)
  • OVH US LLC (for 5 months)
• Bronze sponsors:
  • Evolix (for 88 months)
  • Seznam.cz, a.s. (for 88 months)
  • Intevation GmbH (for 85 months)
  • Linuxhotel GmbH (for 85 months)
  • Daevel SARL (for 84 months)
  • Bitfolk LTD (for 83 months)
  • Greenbone Networks GmbH (for 82 months)
  • Megaspace Internet Services GmbH (for 82 months)
  • NUMLOG (for 82 months)
  • WinGo AG (for 81 months)
  • Ecole Centrale de Nantes LHEEA (for 77 months)
  • Entr ouvert (for 72 months)
  • Adfinis AG (for 70 months)
  • GNI MEDIA (for 64 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 64 months)
  • Tesorion (for 64 months)
  • Bearstech (for 56 months)
  • LiHAS (for 56 months)
  • People Doc (for 52 months)
  • Catalyst IT Ltd (for 50 months)
  • Demarcq SAS (for 44 months)
  • Universit Grenoble Alpes (for 30 months)
  • TouchWeb SAS (for 22 months)
  • SPiN AG (for 19 months)
  • CoreFiling (for 15 months)
  • Institut des sciences cognitives Marc Jeannerod (for 9 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 6 months)
  • Tem Innovations GmbH
  • WordFinder.pro

FTP master Yeah, Bullseye is released, thanks a lot to everybody involved! This month I accepted 242 and rejected 18 packages. The overall number of packages that got accepted was 253. Debian LTS This was my eighty-sixth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 23.75h. During that time I did LTS and normal security uploads of:

• [DLA 2738-1] c-ares security update for one CVE
• [DLA 2746-1] scrollz security update for one CVE
• [DLA 2747-1] ircii security update for one CVE
• [DLA 2748-1] tnef security update for one CVE
• [DLA 2749-1] gthumb security update for one CVE
• [DLA 2752-1] squashfs-tools security update for one CVE
• buster-pu for gthumb #993228
• prepared debdiffs for squashfs-tools in Buster and Bullseye, which will result in DSA 4967
• prepared debdiffs for btrbk in Buster and Bullseye

I also started to work on openssl, grilo and had to process packages from NEW on security-master. As the CVE of btrbk was later marked as no-dsa, an upload to stable and oldstable is needed now. Last but not least I did some days of frontdesk duties. Debian ELTS This month was the thirty-eighth ELTS month. During my allocated time I uploaded:

• ELA-474-1 for c-ares
• ELA-480-1 for squashfs-tools

I also started to work on openssl. Last but not least I did some days of frontdesk duties. Other stuff This month I uploaded new upstream versions of:

• duktape
• pywws
• libosmo-abis
• osmo-ggsn
• osmo-libasn1c
• nuspell

On my neverending golang challenge I again uploaded some packages either for NEW or as source upload.

Like each month, have a look at the work funded by Freexian s Debian LTS offering. Debian project funding In July, we put aside 2400 EUR to fund Debian projects. We haven t received proposals of projects to fund in the last months, so we have scheduled a discussion during Debconf to try to to figure out why that is and how we can fix that. Join us on August 26th at 16:00 UTC on this link. We are pleased to announce that Jeremiah Foster will help out to make this initiative a success : he can help Debian members to come up with solid proposals, he can look for people willing to do the work once the project has been formalized and approved, and he will make sure that the project implementation keeps on track when the actual work has begun. We re looking forward to receive more projects from various Debian teams! Learn more about the rationale behind this initiative in this article. Debian LTS contributors In July, 12 contributors have been paid to work on Debian LTS, their reports are available:

• Abhijith PA did 5.0h (out of 7h assigned and 3h remaining), thus carrying over 5h to August.
• Anton Gladky did 12h (out of 12h assigned).
• Ben Hutchings did 12.75h (out of 16h assigned and 2.75h from June), thus carrying over 6h to August.
• Chris Lamb did 18h (out of 18h assigned).
• Emilio Pozuelo Monfort did not report back about their work so we assume they did nothing (out of 39.75h assigned plus 11h from June), thus is carrying over 50.75h for August.
• Holger Levsen s work was coordinating/managing the LTS team, he did 3.5h (out of 12h assigned) and gave back 8.5h to the pool.
• Markus Koschany did 30h (out of 30h assigned and 30h from June), thus carrying over 30h to August.
• Ola Lundqvist did nothing (out of 12h assigned plus 20h from June), thus is carrying over 32h for August.
• Roberto C. S nchez did 13.5h (out of 32h assigned and 20h from June), and gave back 38.5h to the pool.
• Sylvain Beucler did 30h (out of 30h assigned).
• Thorsten Alteholz did 30h (out of 30h assigned).
• Utkarsh Gupta did 39.75h (out of 39.75h assigned).

Evolution of the situation In July we released 30 DLAs. Also we were glad to welcome Neil Williams and Lee Garrett who became active contributors. The security tracker currently lists 63 packages with a known CVE and the dla-needed.txt file has 17 packages needing an update. We would like to thank Holger Levsen for the years of work where he managed/coordinated the paid LTS contributors. Jeremiah Foster will take over his duties. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 71 months)
  • GitHub (for 62 months)
  • Civil Infrastructure Platform (CIP) (for 39 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 82 months)
  • Linode (for 76 months)
  • Babiel GmbH (for 65 months)
  • Plat Home (for 65 months)
  • University of Oxford (for 21 months)
  • Deveryware (for 8 months)
  • VyOS
• Silver sponsors:
  • The Positive Internet Company (for 87 months)
  • Domeneshop AS (for 86 months)
  • Nantes M tropole (for 80 months)
  • Univention GmbH (for 72 months)
  • Universit Jean Monnet de St Etienne (for 72 months)
  • Ribbon Communications, Inc. (for 66 months)
  • Exonet B.V. (for 56 months)
  • Leibniz Rechenzentrum (for 50 months)
  • CINECA (for 39 months)
  • Minist re de l Europe et des Affaires trang res (for 33 months)
  • Cloudways Ltd (for 23 months)
  • Dinahosting SL (for 21 months)
  • Bauer Xcel Media Deutschland KG (for 15 months)
  • Platform.sh (for 15 months)
  • Moxa Intelligence Co., Ltd. (for 9 months)
  • sipgate GmbH (for 6 months)
  • OVH US LLC (for 4 months)
  • Tilburg University (for 4 months)
• Bronze sponsors:
  • Evolix (for 87 months)
  • Seznam.cz, a.s. (for 87 months)
  • Intevation GmbH (for 84 months)
  • Linuxhotel GmbH (for 84 months)
  • Daevel SARL (for 82 months)
  • Bitfolk LTD (for 81 months)
  • Megaspace Internet Services GmbH (for 81 months)
  • Greenbone Networks GmbH (for 80 months)
  • NUMLOG (for 80 months)
  • WinGo AG (for 80 months)
  • Ecole Centrale de Nantes LHEEA (for 76 months)
  • Entr ouvert (for 71 months)
  • Adfinis AG (for 68 months)
  • GNI MEDIA (for 63 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 63 months)
  • Tesorion (for 63 months)
  • Bearstech (for 54 months)
  • LiHAS (for 54 months)
  • People Doc (for 51 months)
  • Catalyst IT Ltd (for 49 months)
  • Demarcq SAS (for 43 months)
  • Universit Grenoble Alpes (for 29 months)
  • TouchWeb SAS (for 21 months)
  • SPiN AG (for 18 months)
  • CoreFiling (for 13 months)
  • Institut des sciences cognitives Marc Jeannerod (for 8 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 5 months)

FTP master This month I accepted 13 and rejected 2 packages. The overall number of packages that got accepted was 13. As the Release Team prefers not to have any new package upload to unstable, the numbers are this low. I am afraid there is some discussion needed after the release of Bullseye Debian LTS This was my eighty-fifth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 30h. During that time I did LTS and normal security uploads of:

• [DLA 2720-1] aspell security update for two CVEs
• [DLA 2722-1] libsndfile security update for one CVE
• [DLA 2723-1] linuxptp security update for one CVE
• prepared aspell update in Buster, which resulted in DSA 4948-1

I also made further progress on gpac and started to test the package now. Last but not least I did some days of frontdesk duties. I am not sure whether it is just me, but I got the impression that nowadays lots of CVEs can be marked as not-affected in the corresponding Stretch-version. Most of the remaining CVEs only have a small security impact (if at all) and can be marked as no-dsa. So the number of packages that really need an update decreases steadily. Does that mean that all issues in older versions are fixed now? Or are people more focused on new features in software as it is easier to find issues in more or less unexplored code? Debian ELTS This month was the thirty-seventh ELTS month. During my allocated time I uploaded:

• ELA-461-1 for jasper
• ELA-462-1 for aspell
• ELA-464-1 for libsndfile

Last but not least I did some days of frontdesk duties. In ELTS the decreasing number of uploads, as mentioned above, seems to be even more clearly. Other stuff I played a bit with RISC-V and looked after some packages that did not build on that architecture. Generally this looks like fun but building packages with qemu dampens the mood a bit. So if anybody knows some hardware that runs Debian, that is available now and that does not cost more than my car, I would be happy to get some pointer. This month I uploaded new upstream versions of:

• libosmocore
• libsmpp34
• meep

to experimental. I improved packaging and fixed bugs in:

• libcds

On my neverending golang challenge I again uploaded some packages either for NEW or as source upload.

Like each month, have a look at the work funded by Freexian s Debian LTS offering. Debian project funding In June, we put aside 5775 EUR to fund Debian projects for which we re looking forward to receive more projects from various
Debian teams! Learn more about the rationale behind this initiative in this article. Debian LTS contributors In June, 12 contributors have been paid to work on Debian LTS, their reports are available:

• Abhijith PA did 18.0h (out of 14h assigned and 19h from May), thus carrying over 15h to July.
• Anton Gladky did 12h (out of 12h assigned).
• Ben Hutchings did 13.25h (out of 14h assigned and 2h from May), thus carrying over 2.75h to July.
• Chris Lamb did 18h (out of 18h assigned).
• Emilio Pozuelo Monfort did 29h (out of 40h assigned), thus carrying over 11h to July.
• Holger Levsen s work was coordinating/managing the LTS team, he did 3.5h (out of 12h assigned) and gave back 8.5h to the pool.
• Markus Koschany did 29.75h (out of 30h assigned plus 29.75h from May), thus carrying over 30h for July.
• Ola Lundqvist did 10h (out of 12h assigned and 4.5h from May), thus carrying over 6.5h to July.
• Roberto C. S nchez did 12h (out of 32h assigned), thus carrying over 20h to July.
• Sylvain Beucler did 30h (out of 30h assigned).
• Thorsten Alteholz did 30h (out of 30h assigned).
• Utkarsh Gupta did not report back about their work so we assume they did nothing (out of 40h assigned), thus is carrying over 40h for July.

Evolution of the situation In June we released 30 DLAs. As already written last month we are looking for a Debian LTS project manager and team coordinator.
Finally, we would like to remark once again that we are constantly looking for new contributors. Please contact Holger if you are interested! The security tracker currently lists 41 packages with a known CVE and the dla-needed.txt file has 23 packages needing an update. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 70 months)
  • GitHub (for 60 months)
  • Civil Infrastructure Platform (CIP) (for 38 months)
• Gold sponsors:
  • Roche Diagnostics International AG (for 81 months)
  • Linode (for 75 months)
  • Babiel GmbH (for 64 months)
  • Plat Home (for 63 months)
  • University of Oxford (for 20 months)
  • Deveryware (for 7 months)
  • VyOS
• Silver sponsors:
  • The Positive Internet Company (for 86 months)
  • Domeneshop AS (for 85 months)
  • Nantes M tropole (for 79 months)
  • Univention GmbH (for 71 months)
  • Universit Jean Monnet de St Etienne (for 71 months)
  • Ribbon Communications, Inc. (for 65 months)
  • Exonet B.V. (for 54 months)
  • Leibniz Rechenzentrum (for 48 months)
  • CINECA (for 38 months)
  • Minist re de l Europe et des Affaires trang res (for 32 months)
  • Cloudways Ltd (for 21 months)
  • Dinahosting SL (for 19 months)
  • Platform.sh (for 14 months)
  • Bauer Xcel Media Deutschland KG (for 13 months)
  • Moxa Intelligence Co., Ltd. (for 7 months)
  • sipgate GmbH (for 5 months)
  • OVH US LLC (for 3 months)
  • Tilburg University (for 3 months)
• Bronze sponsors:
  • Seznam.cz, a.s. (for 86 months)
  • Evolix (for 85 months)
  • Linuxhotel GmbH (for 83 months)
  • Intevation GmbH (for 82 months)
  • Daevel SARL (for 81 months)
  • Bitfolk LTD (for 80 months)
  • Megaspace Internet Services GmbH (for 80 months)
  • Greenbone Networks GmbH (for 79 months)
  • NUMLOG (for 79 months)
  • WinGo AG (for 78 months)
  • Ecole Centrale de Nantes LHEEA (for 75 months)
  • Entr ouvert (for 70 months)
  • Adfinis AG (for 67 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 62 months)
  • Tesorion (for 62 months)
  • GNI MEDIA (for 61 months)
  • Bearstech (for 53 months)
  • LiHAS (for 53 months)
  • People Doc (for 49 months)
  • Catalyst IT Ltd (for 47 months)
  • Demarcq SAS (for 41 months)
  • Universit Grenoble Alpes (for 28 months)
  • TouchWeb SAS (for 20 months)
  • SPiN AG (for 16 months)
  • CoreFiling (for 12 months)
  • Institut des sciences cognitives Marc Jeannerod (for 7 months)
  • Observatoire des Sciences de l Univers de Grenoble (for 3 months)

FTP master This month I accepted 105 and rejected 6 packages. The overall number of packages that got accepted was 111. Debian LTS This was my eighty-fourth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been almost 30h. During that time I did LTS and normal security uploads of:

• [DLA 2691-1] libgcrypt20 security update for one CVE
• [DLA 2692-1] bluez security update for two CVEs
• [DLA 2694-1] tiff security update for two CVEs
• [DLA 2697-1] fluidsynth security update for one CVE
• [DLA 2698-1] node-bl security update for one CVE
• [DLA 2699-1] ipmitool security update for one CVE
• PU bug #989815 ring/buster for one CVE

I also made further progress on gpac. Last but not least I did some days of frontdesk duties. Debian ELTS This month was the thirty-sixth ELTS month. During my allocated time I uploaded:

• ELA-444-1 for libgcrypt20
• ELA-445-1 for bluez
• ELA-447-1 for tiff
• ELA-450-1 for fluidsynth

Last but not least I did some days of frontdesk duties. Other stuff On my neverending golang challenge I again uploaded lots of packages either for NEW or as source upload.

A while ago, I got a request from Kentaro Hayashi on the project I use to manage funding requests addressed to Freexian. He was keen to see some improvements on the way reimbursement requests are handled in Debian. In my opinion, the idea is certainly good but he s not part of the treasurer team and was not willing to implement the project either, so it was not really ready to be submitted to us. To be able to fund a useful project, we need either someone that is willing to do the work and try to push it further in Debian, or we need a Debian team interested in the result of the project (and in that case, we can try to find someone willing to implement the project). In this case, it s a bit sad that the treasurer team didn t comment at all but in general, what should we do with those suggestions ? It would still be interesting to have a list of such suggestions and have Debian developers be able to advocate (+1) those suggestions. It s in this spirit that Kentaro created the Grow your ideas project on salsa.debian.org. Browse the list of issues, submit your own and click on (+1) to bump the suggestions that you find interesting. And click on the Watch button on the homepage to receive notifications when others submit suggestions so that you can evaluate those suggestions and possibly improve them through your comments. In the end, this can only help those that are looking for ways to contribute to Debian: maybe some of them will formalize a concrete action plan and request funding for it! We have a pile of money sitting unused that s clearly targeted to pay contributors to improve our infrastructure. And we have endless lists of (wishlist) bugs on all our infrastructure projects (dak, distro-tracker, ). What are you waiting ?

Like each month, have a look at the work funded by Freexian s Debian LTS offering. Debian project funding In May, we again put aside 2100 EUR to fund Debian projects. There was no proposals for new projects received, thus we re looking forward to receive more projects from various Debian teams! Please do not hesitate to submit a proposal, if there is a project that could benefit from the funding! We re looking forward to receive more projects from various Debian teams! Learn more about the rationale behind this initiative in this article. Debian LTS contributors In May, 12 contributors have been paid to work on Debian LTS, their reports are available:

• Abhijith PA did 7.0h (out of 14h assigned and 12h from April), thus carrying over 19h to June.
• Anton Gladky did 12h (out of 12h assigned).
• Ben Hutchings did 16h (out of 13.5h assigned plus 4.5h from April), thus is carrying over 2h for June.
• Chris Lamb did 18h (out of 18h assigned).
• Holger Levsen s work was coordinating/managing the LTS team, he did 5.5h and gave back 6.5h to the pool.
• Markus Koschany did 15h (out of 29.75h assigned and 15h from April), thus carrying over 29.75h to June.
• Ola Lundqvist did 12h (out of 12h assigned and 4.5h from April), thus carrying over 4.5h to June.
• Roberto C. S nchez did 7.5h (out of 27.5h assigned and 27h from April), and gave back 47h to the pool.
• Sylvain Beucler did 29.75h (out of 29.75h assigned).
• Thorsten Alteholz did 29.75h (out of 29.75h assigned).
• Utkarsh Gupta did 29.75h (out of 29.75h assigned).

Evolution of the situation In May we released 33 DLAs and mostly skipped our public IRC meeting and the end of the month. In June we ll have another team meeting using video as lined out on our LTS meeting page.
Also, two months ago we announced that Holger would step back from his coordinator role and today we are announcing that he is back for the time being, until a new coordinator is found.
Finally, we would like to remark once again that we are constantly looking for new contributors. Please contact Holger if you are interested! The security tracker currently lists 41 packages with a known CVE and the dla-needed.txt file has 21 packages needing an update. Thanks to our sponsors Sponsors that joined recently are in bold.

• Platinum sponsors:
  • TOSHIBA (for 69 months)
  • GitHub (for 59 months)
  • Civil Infrastructure Platform (CIP) (for 37 months)
• Gold sponsors:
  • Blablacar (for 84 months)
  • Roche Diagnostics International AG (for 80 months)
  • Linode (for 74 months)
  • Babiel GmbH (for 63 months)
  • Plat Home (for 62 months)
  • University of Oxford (for 19 months)
  • Deveryware (for 6 months)
  • VyOS
• Silver sponsors:
  • The Positive Internet Company (for 85 months)
  • Domeneshop AS (for 84 months)
  • Nantes M tropole (for 78 months)
  • Univention GmbH (for 70 months)
  • Universit Jean Monnet de St Etienne (for 70 months)
  • Ribbon Communications, Inc. (for 64 months)
  • Exonet B.V. (for 53 months)
  • Leibniz Rechenzentrum (for 47 months)
  • CINECA (for 37 months)
  • Minist re de l Europe et des Affaires trang res (for 31 months)
  • Cloudways Ltd (for 20 months)
  • Dinahosting SL (for 18 months)
  • Platform.sh (for 13 months)
  • Bauer Xcel Media Deutschland KG (for 12 months)
  • Moxa Intelligence Co., Ltd. (for 6 months)
  • sipgate GmbH (for 4 months)
  • OVH US LLC
  • Tilburg University
• Bronze sponsors:
  • Seznam.cz, a.s. (for 85 months)
  • Evolix (for 84 months)
  • Linuxhotel GmbH (for 82 months)
  • Intevation GmbH (for 81 months)
  • Daevel SARL (for 80 months)
  • Bitfolk LTD (for 79 months)
  • Megaspace Internet Services GmbH (for 79 months)
  • Greenbone Networks GmbH (for 78 months)
  • NUMLOG (for 78 months)
  • WinGo AG (for 77 months)
  • Ecole Centrale de Nantes LHEEA (for 73 months)
  • Entr ouvert (for 69 months)
  • Adfinis AG (for 66 months)
  • Tesorion (for 61 months)
  • GNI MEDIA (for 60 months)
  • Laboratoire LEGI UMR 5519 / CNRS (for 60 months)
  • Bearstech (for 52 months)
  • LiHAS (for 52 months)
  • People Doc (for 48 months)
  • Catalyst IT Ltd (for 46 months)
  • Demarcq SAS (for 40 months)
  • Universit Grenoble Alpes (for 26 months)
  • TouchWeb SAS (for 18 months)
  • SPiN AG (for 15 months)
  • CoreFiling (for 11 months)
  • Institut des sciences cognitives Marc Jeannerod (for 6 months)
  • Observatoire des Sciences de l Univers de Grenoble

FTP master This month I accepted 85 and rejected 6 packages. The overall number of packages that got accepted was only 88. Yeah, Debian is frozen but hopefully will unfreeze soon. Debian LTS This was my eighty-third month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. This month my all in all workload has been 29.75h. During that time I did LTS and normal security uploads of:

• [DLA 2650-1] exim4 security update for 17 CVEs
• [DLA 2665-1] ring security update one CVE
• [DLA 2669-1] libxml2 security update one CVE
• the fix for tnef/CVE-2019-18849 had been approved and I could do the PU-upload

I also made some progress with gpac and struggle with dozens of issues here. Last but not least I did some days of frontdesk duties, which for whatever reason was rather time-consuming this month. Debian ELTS This month was the thirty-fifth ELTS month. During my allocated time I uploaded:

• ELA-420-1 for exim4
• ELA-435-1 for python2.7
• ELA-436-1 for libxml2

I also made some progress with python3.4 Last but not least I did some days of frontdesk duties. Other stuff On my neverending golang challenge I again uploaded some packages either for NEW or as source upload. Last but not least I adopted gnucobol.